The vulnerability of the _gnutls_proc_rsa_psk_client_kx() function in the lib/auth/rsa_psk.c file of the GnuTLS cryptographic library allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the gnutlsprocrsapskclientkx function in the lib/auth/rsapsk.c file of the GnuTLS cryptographic library is related to incorrect handling of zero bytes or NULL characters during data exchange. Exploiting this vulnerability could allow an attacker to bypass existing security...

CVE-2026-15545

creationtimestamp| type| source ---|---|--- 2026-07-12 21:08:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116909047453913000 2026-07-13 09:50:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjg3ytbd52i 2026-07-13 09:58:12+00:00| seen|...

CVE-2026-10666

creationtimestamp| type| source ---|---|--- 2026-07-12 17:07:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116908101022929699 2026-07-12 17:36:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhporgri52a 2026-07-12 18:00:14+00:00| seen|...

CVE-2026-61876

creationtimestamp| type| source ---|---|--- 2026-07-12 12:26:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6fkg4lk2e 2026-07-12 12:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqh7hqwuyt2t 2026-07-12 13:00:35+00:00| seen|...

CVE-2026-15497

A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file sonic-server-controller/src/main/java/org/cloud/sonic/controller/controller/ExchangeController.java of the component JWT Authentication Filter. This manipulation causes code...

EUVD-2026-43219

A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file sonic-server-controller/src/main/java/org/cloud/sonic/controller/controller/ExchangeController.java of the component JWT Authentication Filter. This manipulation causes code...

CVE-2026-15497

Affected software / component: SonicCloudOrg sonic-agent (up to 2.7.2), specifically the JWT Authentication Filter in the ExchangeController.java path. Vulnerability: code injection vulnerability reported as enabling a remote attacker to manipulate code execution. Impact (per docs): remote exploi...

CVE-2026-15497 SonicCloudOrg sonic-agent JWT Authentication Filter ExchangeController.java code injection

A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file sonic-server-controller/src/main/java/org/cloud/sonic/controller/controller/ExchangeController.java of the component JWT Authentication Filter. This manipulation causes code...

CVE-2026-15481

creationtimestamp| type| source ---|---|--- 2026-07-12 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqgisf5b4s23 2026-07-12 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116905477743159401 2026-07-12 06:51:14+00:00| seen|...

CVE-2026-58281

creationtimestamp| type| source ---|---|--- 2026-07-11 21:15:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116903411967472992 2026-07-11 21:32:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqfmfunupq26 2026-07-11 21:59:57+00:00| seen|...

CVE-2026-15484

creationtimestamp| type| source ---|---|--- 2026-07-11 12:30:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116901350103809605 2026-07-12 07:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/116905831499436002 2026-07-12 07:30:25+00:00| seen|...

CVE-2026-29519

creationtimestamp| type| source ---|---|--- 2026-07-11 10:26:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116900862378837802 2026-07-12 11:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqgzlgbsyo2r 2026-07-13 22:00:05+00:00| seen|...

CVE-2026-7655

creationtimestamp| type| source ---|---|--- 2026-07-11 06:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116899815763339331 2026-07-11 06:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqdydvch3z2d 2026-07-11 06:31:25+00:00| seen|...

CVE-2026-57221

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform authorization checks on passive queue.declare and exchange.declare AMQP 0-9-1 operations, allowing any authenticated user who can connect to a virtual host to enumerate queue and...

DEBIAN-CVE-2026-57221

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform authorization checks on passive queue.declare and exchange.declare AMQP 0-9-1 operations, allowing any authenticated user who can connect to a virtual host to enumerate queue and...

DEBIAN-CVE-2026-57214

RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute without proper escaping on the Queues and Exchanges pages, allowing a user with permission to declare a queue or exchange...

UBUNTU-CVE-2026-57221

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform authorization checks on passive queue.declare and exchange.declare AMQP 0-9-1 operations, allowing any authenticated user who can connect to a virtual host to enumerate queue and...

Missing Authorization

Overview github.com/zitadel/zitadel/internal/api/oidc is a package for identity infrastructure Affected versions of this package are vulnerable to Missing Authorization in the OAuth2 Token Exchange process. An attacker can gain elevated permissions by exchanging a low-privilege token for higher...

CVE-2026-57221

RabbitMQ vulnerability CVE-2026-57221 affects passive queue.declare and exchange.declare operations in AMQP 0-9-1. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, authenticated users who can connect to a virtual host could enumerate queue and exchange names and read queue message and consum...

CVE-2026-57221 RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, leaking queue metadata to unprivileged users

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ does not perform authorization checks on passive queue.declare and exchange.declare AMQP 0-9-1 operations, allowing any authenticated user who can connect to a virtual host to enumerate queue and...